Thanks, that was helpful.

Dave Thompson-4 wrote:
> 
>> From: owner-openssl-us...@openssl.org On Behalf Of brechmos
>> Sent: Thursday, 12 March, 2009 17:55
> 
>> Yeah, I appreciate that.
>> 
>> What I can't see in the docs is how the key and IV is defined from the
>> password and if I can do that without calling the openssl enc 
>> call.  If the
>> key and IV were from an md5 then I could do "echo '1234' | openssl md5". 
>> But it isn't md5 and I can't figure out what it is...
>> 
> It is by default based on md5, but is not just md5.
> Specifically it is the routine EVP_BytesToKey, 
> which (at least in 0.9.8) has a section-3 manpage.
> Since the details of key derivation (in general) 
> are fiddly, you might prefer to look at the source 
> which is in $distdir/crypto/evp/evp_key.c .
> <snip>
> 
>> 
>> Dave Thompson-4 wrote:
> <snip: previous question about providing the passphrase to 'enc'.>
> 
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
> 
> 

-- 
View this message in context: 
http://www.nabble.com/PBE-Key-creation-tp22476230p22558457.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to